This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/KAcxy9c3kuEaoLAu20siPp3ZrbE.roa File: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (raw, json) Hash identifier: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM= Subject key identifier: 28:07:31:CB:D7:37:92:E1:1A:A0:B0:2E:DB:4B:22:3E:9D:D9:AD:B1 Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Certificate serial: 019B7E381077C0A58A8BF9808953B16032B5 Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/KAcxy9c3kuEaoLAu20siPp3ZrbE.roa Signing time: Fri 02 Jan 2026 10:19:22 +0000 ROA not before: Fri 02 Jan 2026 10:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 157.84.32.0/23 maxlen: 23 157.84.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:10:77:c0:a5:8a:8b:f9:80:89:53:b1:60:32:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Validity Not Before: Jan 2 10:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=280731cbd73792e11aa0b02edb4b223e9dd9adb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:ec:1c:29:06:a5:ce:9c:42:a6:27:7e:16: 0a:7c:9a:73:90:fa:cb:2f:4c:31:bf:a6:e1:00:92: 02:e2:a2:58:45:03:47:cf:84:da:20:75:ce:c0:c1: 61:e2:ea:8a:56:02:ea:34:d6:ca:73:13:a3:88:9d: 3e:35:9a:e4:04:40:97:27:bb:0c:58:16:f1:c7:78: 49:d0:00:4a:eb:5b:d4:10:d2:80:21:a4:6f:9e:87: 3b:c6:de:46:21:27:a0:cd:35:a3:b9:35:9f:64:c8: 7b:76:7b:f8:af:a9:59:47:e0:4f:8c:d0:4e:ee:66: d0:46:97:04:10:90:06:d1:91:df:70:42:ad:ab:77: 99:42:de:20:5c:3b:94:37:fe:4b:fc:48:6f:63:ba: 36:35:46:a6:65:20:cf:f1:b7:23:d5:a4:c6:eb:88: d8:ae:73:b1:db:fb:5d:1a:4b:8b:59:87:4f:1d:54: 1d:9a:b3:4b:e6:f8:ab:b5:80:77:03:b3:8f:58:9a: 94:12:92:31:08:71:b1:a1:a6:ad:37:c7:b5:0a:48: d4:b3:66:b6:49:bf:6a:f4:2a:cd:7b:02:9e:3e:3d: 2f:48:5a:be:6c:35:9b:ae:d3:d3:62:9d:3d:01:97: fa:bc:89:3d:f5:08:63:86:34:33:8a:9e:03:2b:69: 79:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:07:31:CB:D7:37:92:E1:1A:A0:B0:2E:DB:4B:22:3E:9D:D9:AD:B1 X509v3 Authority Key Identifier: keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/KAcxy9c3kuEaoLAu20siPp3ZrbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.84.32.0/23 157.84.40.0/23 Signature Algorithm: sha256WithRSAEncryption 94:e7:dc:61:ee:ea:05:69:60:e7:4c:dc:32:dc:5f:db:b4:8b: 67:7e:08:cf:27:96:cb:e3:92:58:f5:46:24:28:60:e2:37:ef: 91:c9:8d:19:d3:cd:9f:82:ed:5d:8c:e2:6e:e5:e1:10:5e:2e: 8d:73:c8:c9:7b:cc:56:27:20:12:b2:bd:99:3b:2c:58:18:11: 8d:56:f3:86:1e:2f:24:54:d6:30:1b:9a:b8:54:d0:3b:cf:79: 38:95:25:d8:be:08:46:3c:59:aa:0a:63:f4:6f:0e:e6:e7:7b: 65:40:a9:31:5e:9e:19:3d:2f:cf:0c:29:94:dd:a4:3f:1c:8f: cf:10:c2:ee:3a:6b:9c:83:10:1c:a1:00:ce:72:21:0d:a3:63: 92:c7:2e:c0:f5:cd:46:0d:9d:f6:6f:33:38:df:13:4c:9c:a5: 9e:0b:9e:71:34:ee:4d:01:55:56:12:75:5e:09:9c:d1:0e:01: 55:d5:ff:3a:61:5b:3b:6f:b9:8f:09:16:e0:b3:ce:56:70:80: a3:72:aa:28:16:11:bd:3b:d5:55:2f:94:4a:19:60:cb:c9:c6: 82:94:c7:3c:67:cb:38:2c:27:04:d6:42:09:f9:05:6b:9f:02: c5:4a:27:0e:c4:53:06:45:fb:91:46:86:6c:11:72:8a:45:c9: 62:9d:51:1f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OBB3wKWKi/mAiVOxYDK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYjc1MzQxNTAwODA3YTk3NTBhOGNmNTViZjRlNDVmZjAz ZjMxMmEwHhcNMjYwMTAyMTAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODA3MzFjYmQ3Mzc5MmUxMWFhMGIwMmVkYjRiMjIzZTlkZDlhZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwLsHCkGpc6cQqYnfhYKfJpzkPrL L0wxv6bhAJIC4qJYRQNHz4TaIHXOwMFh4uqKVgLqNNbKcxOjiJ0+NZrkBECXJ7sM WBbxx3hJ0ABK61vUENKAIaRvnoc7xt5GISegzTWjuTWfZMh7dnv4r6lZR+BPjNBO 7mbQRpcEEJAG0ZHfcEKtq3eZQt4gXDuUN/5L/EhvY7o2NUamZSDP8bcj1aTG64jY rnOx2/tdGkuLWYdPHVQdmrNL5virtYB3A7OPWJqUEpIxCHGxoaatN8e1CkjUs2a2 Sb9q9CrNewKePj0vSFq+bDWbrtPTYp09AZf6vIk99QhjhjQzip4DK2l58wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCgHMcvXN5LhGqCwLttLIj6d2a2xMB8GA1UdIwQY MBaAFMy3U0FQCAepdQqM9Vv05F/wPzEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUt YTk5YTIxMDE1OTM3LzEvS0FjeHk5YzNrdUVhb0xBdTIwc2lQcDNacmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUtYTk5YTIxMDE1OTM3 LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnVQgAwQB nVQoMA0GCSqGSIb3DQEBCwUAA4IBAQCU59xh7uoFaWDnTNwy3F/btItnfgjPJ5bL 45JY9UYkKGDiN++RyY0Z082fgu1djOJu5eEQXi6Nc8jJe8xWJyASsr2ZOyxYGBGN VvOGHi8kVNYwG5q4VNA7z3k4lSXYvghGPFmqCmP0bw7m53tlQKkxXp4ZPS/PDCmU 3aQ/HI/PEMLuOmucgxAcoQDOciENo2OSxy7A9c1GDZ32bzM43xNMnKWeC55xNO5N AVVWEnVeCZzRDgFV1f86YVs7b7mPCRbgs85WcICjcqooFhG9O9VVL5RKGWDLycaC lMc8Z8s4LCcE1kIJ+QVrnwLFSicOxFMGRfuRRoZsEXKKRclinVEf -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:23 2026 by rpki-client